Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2023-46449

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function.

  • Published: Oct 26, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-46449
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
mayurik / inventory_management_system 1.0 1.0.x